Senior Endpoint Engineering Lead - Secure, Remote DC (TS)

Jobgether; United States; Hybrid; USD 155,000 - 195,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Flexible Spending Account (FSA)

Health Savings Account (HSA)

Life and AD&D insurance

Disability insurance

401(k) retirement plan

Tuition assistance

Paid time off

Remote work arrangement within DC area

Job summary

Jobgether seeks a senior technical specialist to lead enterprise endpoint engineering, automation, and secure device management across Windows and macOS. You will own imaging, provisioning, patching, configuration, and remediation at scale while maintaining secure baselines.

You will collaborate with cybersecurity, DevSecOps, and program management teams to deliver reliable IT services in a security-focused environment and help enforce compliance across large enterprise environments.

Qualifications

• 8+ years of experience in IT, endpoint management, cybersecurity, or a closely related technical discipline.
• At least 6 years of hands-on engineering within enterprise IT or endpoint environments.
• Expertise leading endpoint engineering, automation, enterprise device management, imaging, patching, configuration control, and remediation across Windows and macOS.
• Practical experience with endpoint management platforms such as Intune, Autopilot, JAMF, Ivanti, and/or KACE.
• Strong understanding of endpoint security, configuration management, patch management, compliance controls, and device lifecycle processes.
• Ability to develop automation, deployment controls, validation procedures, and repeatable remediation workflows.
• Strong troubleshooting, analytical, documentation, and problem-solving skills.
• Excellent communication and collaboration with cybersecurity, DevSecOps, and program management stakeholders.
• A degree is not required; demonstrated technical expertise and relevant engineering experience are the primary qualifications.
• Must be a U.S. citizen and able to obtain and maintain the required security clearance and complete applicable background investigations and security training.
• An active Top Secret (TS) security clearance is required.
• Ability to work remotely within the metropolitan Washington, DC area and occasionally work onsite or attend team meetings as required.

Responsibilities

• Lead enterprise endpoint engineering initiatives across Windows and macOS device environments, ensuring reliable and secure endpoint operations.
• Own the full device lifecycle, including imaging, provisioning, patching, configuration management, remediation, and lifecycle updates.
• Implement, maintain, and optimize endpoint management technologies such as Microsoft Intune, Autopilot, JAMF, Ivanti, and KACE.
• Develop and execute automated deployment and configuration controls to improve scalability, consistency, and operational efficiency.
• Establish and maintain patch validation, testing, and rollback procedures to reduce operational risk and service disruption.
• Support secure baseline enforcement, endpoint compliance monitoring, and remediation activities across enterprise environments.
• Create and maintain engineering documentation, including runbooks, standard operating procedures, and remediation workflows.
• Provide escalation support and resolve complex endpoint engineering and operational issues.
• Collaborate closely with DevSecOps, cybersecurity, and program management teams to align endpoint services with security and mission requirements.
• Take ownership of mission-critical endpoint engineering in a security-focused environment.

Skills

Endpoint management

Automation

Imaging

Provisioning

Windows

macOS

Security

Documentation

Tools

Intune

Autopilot

JAMF

Ivanti

KACE

Job description

Jobgether seeks a senior technical specialist to lead enterprise endpoint engineering, automation, and secure device management across Windows and macOS. You will own imaging, provisioning, patching, configuration, and remediation at scale while maintaining secure baselines.

You will collaborate with cybersecurity, DevSecOps, and program management teams to deliver reliable IT services in a security-focused environment and help enforce compliance across large enterprise environments.